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AMENDMENTS TO THE CLAIMS 

1 . (Previously presented) A system for configuring differentiated services (Diffserv) 
over multi-protocol label switching (MPLS) in a network that includes MPLS tunnels, 
comprising: 

a policy server that is arranged to configure a customer policy and a mapping 
policy that maps between an experimental (EXP) field and a unique per-hop-behavior 
(PHB), and to deploy the mapping policy and the customer policy to interfaces of devices 
of the network that correspond to the tunnels, wherein the interfaces and the customer 
policy are associated with a same role name. 

2. (Original) The system of claim 1, wherein 

the customer policy comprises a tunnel group identifier and tunneling mode. 

3. (Original) The system of claim 1, wherein 

the policy server translates the mapping policy into device specific commands, 

and 

deployment is performed by deploying commands to specific devices. 

4. (Original) The system of claim 1, wherein 

deployment is such that the interfaces associate with at least one of input roles, 
output roles and MPLS gateways of customer source and destination host groups, 

5. (Currently amended) An apparatus for configuring Diffserv over MPLS in a 
network, comprising: 

a memory; 

a service application residing on the memory, 
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wherein the service application is arranged to configure a customer policy 
that comprises a tunnel group and tunneling mode, the customer policy being 
arranged to have customer traffic mapped into MPLS tunnels, and 

wherein the service application is arranged to configure an EXP-to-PHB 
mapping policy that is arranged to map EXP fields to PHB; 

a central processing facility that is arranged to translate the customer policy and 
mapping policy into device-neutral policy parameters; and 

a policy consumer that is arranged to translate the device-neutral policy 
parameters into device-specific commands, and that is further arranged to deploy the 
device-specific commands to policy targets, such that the customer policy and mapping 
policy are implemented across at least a portion of the network, and wherein the policy 
targets comprise network devices that each include an interface associated with a role 
name that is also associated with the customer policy. 

6, (Original) The apparatus of claim 5, further comprising: 

a user interface that is arranged to receive the customer policy and the mapping 

policy, 

7, (Original) The apparatus of claim 5, wherein 

deployment is such that the interfaces associate with at least one of input roles, 
output roles and MPLS gateways of customer source and destination host groups. 

8, (Original) The apparatus of claim 5, wherein 

the policy consumer is further arranged to attach the customer policy to the 
corresponding MPLS tunnels and deploy the customer policy to interfaces of the attached 
MPLS tunnels. 
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9. (Original) The apparatus of claim 5, further comprising: 

a database for storing the device-neutral policy parameters. 

10. (Original) The apparatus of claim 5, wherein 

the service application comprises a tunnel group object that is arranged to create 
the MPLS tunnels by specifying end-point routers and inter-connecting topology. 

1 1 . (Currently amended) An apparatus for configuring Diffserv over MPLS in a 
network, comprising: 

a means for defining a mapping policy that maps between an EXP field and a 
unique PHB; 

a means for maintaining a customer policy; 

a means for translating the mapping policy and customer policy into device- 
specific commands; and 

a means for deploying the device-specific commands to policy targets, wherein 
each policy target comprises a network device that includes an interface that is associated 
with a role name that is also associated with the customer policy. 

12. (Original) The apparatus of claim 11, wherein 

the customer policy includes information about a tunnel group identifier and a 
tunnel mode. 

13. (Original) The apparatus of claim 1 1, wherein 

deployment is such that the interfaces associate with at least one of input roles, 
output roles and MPLS gateways of customer source and destination host groups. 

14. (Currently amended) An article comprising: a storage medium, the storage 
medium having instructions stored thereon, wherein when the instructions are executed 
by at least one device, they result in: 
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defining a mapping policy configured to map between an EXP field and a unique 

PHB; 

defining a customer policy that is configured to govern the treatment of individual 
customer traffic; 

defining a network policy that is configured to define the Diffserv treatment of 
aggregated traffic; 

translating the mapping policy, the network policy and the customer policy into 
device-specific commands; and 

deploying the device-specific commands to policy targets, wherein each policy 
target comprises a network device that includes an interface assigned a role name 
associated with the customer policy. 

15. (Original) The article of claim 14, wherein executing the instructions fiirther 
results in: 

generating device neutral information associated with the mapping policy, the 
network policy and the customer policy. 

16. (Original) The article of claim 1 5, wherein 

the device specific commands are generated from the device neutral information, 

17. (Original) The article of claim 15, wherein executing the instructions fiirther 
results in: 

storing the device neutral information in a database. 

18. (Original) The article of claim 14, wherein 

deployment is such that the interfaces associate with at least one of input roles, 
output roles and MPLS gateways of customer source and destination host groups. 
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19. (Original) The article of claim 14, wherein 

deploying the mapping policy to the network interfaces further comprises issuing 
new commands to reconfigure a router based on the mapping policy. 

20. (Original) The article of claim 14, wherein 

the customer policy includes information about a tunnel group identifier and a 
tunnel mode. 

2 1 . (Currently amended) A method for configuring Diffserv over MPLS in a 
network, comprising: 

defining a mapping policy configured to map between an EXP field and a unique 

PHB; 

defining a customer policy that is configured to govern the treatment of individual 
customer traffic; 

defining a network policy that is configured to define the Diffserv treatment of 
aggregated traffic; 

translating the mapping policy, the network policy and the customer policy into 
device-specific commands; and 

deploying the device-specific commands to policy targets, wherein each policy 
target comprise a network device that includes an interface assigned a role name 
associated with the customer policy. 

22. (Original) The method of claim 21, further comprising: 

generating device neutral information associated with the mapping policy, the 
network policy and the customer policy. 

23. (Original) The method of claim 22, wherein 
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the device specific commands are generated from the device neutral information. 

24. (Original) The method of claim 22, further comprising: 
storing the device neutral information in a database. 

25. (Previously presented) The method of claim 2 1 , wherein 

deployment is such that the network interfaces of the policy targets associate with 
at least one of input roles, output roles and MPLS gateways of customer source and 
destination host groups. 

26. (Previously presented) The method ofclaim 21, wherein 

deploying device-specific commands associated with the mapping policy to the 
network interfaces of the policy targets further comprises issuing new commands to 
reconfigure a router based on the mapping policy. 

27. (Original) The method of claim 21 wherein 

the customer policy includes information about a tunnel group identifier and a 
tunnel mode. 
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